1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252
|
// RUN: %clang_analyze_cc1 -triple x86_64-apple-darwin10 -analyzer-checker=core -analyzer-store=region -fblocks -analyzer-opt-analyze-nested-blocks -verify %s
// RUN: %clang_analyze_cc1 -triple x86_64-apple-darwin10 -analyzer-checker=core -analyzer-store=region -fblocks -analyzer-opt-analyze-nested-blocks -verify -x objective-c++ %s
//===----------------------------------------------------------------------===//
// The following code is reduced using delta-debugging from Mac OS X headers:
//===----------------------------------------------------------------------===//
typedef __builtin_va_list va_list;
typedef unsigned int uint32_t;
typedef struct dispatch_queue_s *dispatch_queue_t;
typedef struct dispatch_queue_attr_s *dispatch_queue_attr_t;
typedef void (^dispatch_block_t)(void);
void dispatch_async(dispatch_queue_t queue, dispatch_block_t block);
__attribute__((visibility("default"))) __attribute__((__malloc__)) __attribute__((__warn_unused_result__)) __attribute__((__nothrow__)) dispatch_queue_t dispatch_queue_create(const char *label, dispatch_queue_attr_t attr);
typedef long dispatch_once_t;
void dispatch_once(dispatch_once_t *predicate, dispatch_block_t block);
dispatch_queue_t
dispatch_queue_create(const char *label, dispatch_queue_attr_t attr);
typedef signed char BOOL;
typedef unsigned long NSUInteger;
typedef struct _NSZone NSZone;
@class NSInvocation, NSMethodSignature, NSCoder, NSString, NSEnumerator;
@protocol NSObject
- (BOOL)isEqual:(id)object;
- (oneway void)release;
@end
@protocol NSCopying - (id)copyWithZone:(NSZone *)zone; @end
@protocol NSMutableCopying - (id)mutableCopyWithZone:(NSZone *)zone; @end
@protocol NSCoding - (void)encodeWithCoder:(NSCoder *)aCoder; @end
@interface NSObject <NSObject> {}
+ (id)alloc;
- (id)init;
- (id)copy;
@end
extern id NSAllocateObject(Class aClass, NSUInteger extraBytes, NSZone *zone);
@interface NSString : NSObject <NSCopying, NSMutableCopying, NSCoding>
- (NSUInteger)length;
- (const char *)UTF8String;
- (id)initWithFormat:(NSString *)format arguments:(va_list)argList __attribute__((format(__NSString__, 1, 0)));
@end
@class NSString, NSData;
typedef struct cssm_sample {} CSSM_SAMPLEGROUP, *CSSM_SAMPLEGROUP_PTR;
typedef struct __aslclient *aslclient;
typedef struct __aslmsg *aslmsg;
aslclient asl_open(const char *ident, const char *facility, uint32_t opts);
int asl_log(aslclient asl, aslmsg msg, int level, const char *format, ...) __attribute__((__format__ (__printf__, 4, 5)));
struct Block_layout {
int flags;
};
//===----------------------------------------------------------------------===//
// Begin actual test cases.
//===----------------------------------------------------------------------===//
// test1 - This test case exposed logic that caused the analyzer to crash because of a memory bug
// in BlockDataRegion. It represents real code that contains two block literals. Eventually
// via IPA 'logQueue' and 'client' should be updated after the call to 'dispatch_once'.
void test1(NSString *format, ...) {
static dispatch_queue_t logQueue;
static aslclient client;
static dispatch_once_t pred;
do {
if (__builtin_expect(*(&pred), ~0l) != ~0l)
dispatch_once(&pred, ^{
logQueue = dispatch_queue_create("com.mycompany.myproduct.asl", 0);
client = asl_open(((char*)0), "com.mycompany.myproduct", 0);
});
} while (0);
va_list args;
__builtin_va_start(args, format);
NSString *str = [[NSString alloc] initWithFormat:format arguments:args];
dispatch_async(logQueue, ^{ asl_log(client, ((aslmsg)0), 4, "%s", [str UTF8String]); });
[str release];
__builtin_va_end(args);
}
// test2 - Test that captured variables that are uninitialized are flagged
// as such.
void test2() {
static int y = 0;
int x;
^{ y = x + 1; }(); // expected-warning{{Variable 'x' is uninitialized when captured by block}}
}
void test2_b() {
static int y = 0;
__block int x;
^{ y = x + 1; }(); // expected-warning {{left operand of '+' is a garbage value}}
}
void test2_c() {
typedef void (^myblock)(void);
myblock f = ^() { f(); }; // expected-warning{{Variable 'f' is uninitialized when captured by block}}
}
void testMessaging() {
// <rdar://problem/12119814>
[[^(){} copy] release];
}
@interface rdar12415065 : NSObject
@end
@implementation rdar12415065
- (void)test {
// At one point this crashed because we created a path note at a
// PreStmtPurgeDeadSymbols point but only knew how to deal with PostStmt
// points. <rdar://problem/12687586>
extern dispatch_queue_t queue;
if (!queue)
return;
// This previously was a false positive with 'x' being flagged as being
// uninitialized when captured by the exterior block (when it is only
// captured by the interior block).
dispatch_async(queue, ^{
double x = 0.0;
if (24.0f < x) {
dispatch_async(queue, ^{ (void)x; });
[self test];
}
});
}
@end
void testReturnVariousSignatures() {
(void)^int(){
return 42;
}();
(void)^int{
return 42;
}();
(void)^(){
return 42;
}();
(void)^{
return 42;
}();
}
// This test used to cause infinite loop in the region invalidation.
void blockCapturesItselfInTheLoop(int x, int m) {
void (^assignData)(int) = ^(int x){
x++;
};
while (m < 0) {
void (^loop)(int);
loop = ^(int x) {
assignData(x);
};
assignData = loop;
m++;
}
assignData(x);
}
// Blocks that called the function they were contained in that also have
// static locals caused crashes.
// rdar://problem/21698099
void takeNonnullBlock(void (^)(void)) __attribute__((nonnull));
void takeNonnullIntBlock(int (^)(void)) __attribute__((nonnull));
void testCallContainingWithSignature1()
{
takeNonnullBlock(^{
static const char str[] = "Lost connection to sharingd";
testCallContainingWithSignature1();
});
}
void testCallContainingWithSignature2()
{
takeNonnullBlock(^void{
static const char str[] = "Lost connection to sharingd";
testCallContainingWithSignature2();
});
}
void testCallContainingWithSignature3()
{
takeNonnullBlock(^void(){
static const char str[] = "Lost connection to sharingd";
testCallContainingWithSignature3();
});
}
void testCallContainingWithSignature4()
{
takeNonnullBlock(^void(void){
static const char str[] = "Lost connection to sharingd";
testCallContainingWithSignature4();
});
}
void testCallContainingWithSignature5()
{
takeNonnullIntBlock(^{
static const char str[] = "Lost connection to sharingd";
testCallContainingWithSignature5();
return 0;
});
}
__attribute__((objc_root_class))
@interface SuperClass
- (void)someMethod;
@end
@interface SomeClass : SuperClass
@end
// Make sure to properly handle super-calls when a block captures
// a local variable named 'self'.
@implementation SomeClass
-(void)foo; {
/*__weak*/ SomeClass *weakSelf = self;
(void)(^(void) {
SomeClass *self = weakSelf;
(void)(^(void) {
(void)self;
[super someMethod]; // no-warning
});
});
}
@end
// The incorrect block variable initialization below is a hard compile-time
// error in C++.
#if !defined(__cplusplus)
void call_block_with_fewer_arguments() {
void (^b)() = ^(int a) { };
b(); // expected-warning {{Block taking 1 argument is called with fewer (0)}}
}
#endif
int getBlockFlags() {
int x = 0;
return ((struct Block_layout *)^{ (void)x; })->flags; // no-warning
}
|